Cryptographic architecture for secure, private biometric identification

• US 20020152391A1
• Filed: 04/13/2001
• Published: 10/17/2002
• Est. Priority Date: 04/13/2001
• Status: Active Grant

• Current Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Willins, Bruce, Sharony, Jacob, Wang, Huayan
• Granted Patent: US 6,990,587 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A semiconductor device for securely controlling access to a cryptographic processor including a semiconductor package with a biometric data capture device therein operative to acquire data associated with predetermined biometric characteristic of a user and store it as a biometric key, and a processing unit in the package coupled to the data capture device. An encryption/decryption circuit is also disposed in the semiconductor package and is operative to perform encryption or decryption on input data utilizing the biometric key.

Claims

1. A semiconductor device for securely controlling access to cryptographic processing of data comprising:

a semiconductor package;

a cryptographic processor disposed in the semiconductor package, the processor including a biometric data capture device operative to acquire to data associated with predetermined biometric characteristic of a user and store it as a biometric key, and a encryption/decryption circuit operative to perform encryption or decryption on input data utilizing said biometric key.

2. A device as defined in claim 1, wherein the stored biometric key is encrypted data.

3. A device as defined in claim 1, where the biometric data capture circuit performs an encryption operation on the same source biometric data to produce encrypted source data.

4. A device as defined in claim 3, wherein the processing unit compares the encrypted source data with the stored biometric key.

5. A device as defined in claim 3, wherein the source biometric data is a fingerprint.

6. A mobile computer comprising

a hand-held housing;

a wireless RF transceiver in the housing to transmit and receive data over a wireless communications channel;

a data input device in the housing;

a data output device in the housing; and

a cryptographic processor disposed in a single semiconductor package, the processor including a biometric data capture device contained in the semiconductor package to capture data associated with predetermined biometric characteristic of a user and store it as a biometric key; and

a encryption/decryption circuit disposed in the semiconductor package operative to perform encryption or decryption on input data utilizing said biometric key.

7. A device as defined in claim 6, wherein the stored biometric key is stored as encrypted data.

8. A device as defined in claim 6, where the biometric data capture circuit performs an encryption operation on the source biometric data to produce an encrypted key.

9. A device as defined in claim 8, wherein the processing unit utilizes the stored biometric key with a cryptographic algorithm.

10. A device as defined in claim 8, wherein the source biometric data is a fingerprint.

12. A network as defined in claim 10, wherein said cryptographic processor includes a biometric data capture device and a encryption/decryption circuit operative to perform encryption or decryption on input data to the processor utilizing said biometric key.

11. A secure wireless local area network comprising;

a mobile computer including a cryptographic processor and a wireless RF transceiver;

an access point connected to a wired local area network including a wireless RF transceiver capable of communication with the mobile computer; and

a security protocol program executed in the cryptographic processor in said mobile computer and in said access point to establish authentication of the mobile computer by said access point by verification of a stored encrypted biometric key in said cryptographic processor.

13. A network as defined in claim 12, wherein the stored biometric key is encrypted biometric data from an authorized user of the network.

14. A network as defined in claim 12, where the processor performs an encryption operation on the source biometric data to produce encrypted source biometric data which is stored as a biometric key.

15. A network as defined in claim 14, wherein the processor compares the encrypted source biometric data with the biometric data of the current user of the mobile computer as derived by the biometric data capture device.

16. A network as defined in claim 14, wherein the source biometric data is a fingerprint.

17. A network as defined in claim 11, further comprising an authentication server connected to the wired local area network.

18. A network as defined in claim 17, further comprising a software protocol above the radio frequency MAC levels.